The current user must have been authenticated